Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c8b3527e-2448-347d-a1c5-3253238efb84.roa
File:                     c8b3527e-2448-347d-a1c5-3253238efb84.roa (raw, json)
Hash identifier:          QeqQQuWxPYNSmY/lPi7jTuRlTo2yWqwHowQDe57XmhI=
Subject key identifier:   4D:62:01:B9:A4:C6:C1:81:5D:51:DF:17:41:27:40:65:37:06:6E:92
Certificate issuer:       /CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
Certificate serial:       010D0C9F4328583E432F180F49691A836CCCA9B0
Authority key identifier: BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c8b3527e-2448-347d-a1c5-3253238efb84.roa
Signing time:             Mon 10 Feb 2020 18:18:36 +0000
ROA not before:           Mon 10 Feb 2020 18:18:36 +0000
ROA not after:            Wed 18 Sep 2024 04:00:00 +0000
asID:                     209371
IP address blocks:        68.67.195.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:43:2f:18:0f:49:69:1a:83:6c:cc:a9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0d76fa-3114-4c31-b7dc-95977b39b4e5
        Validity
            Not Before: Feb 10 18:18:36 2020 GMT
            Not After : Sep 18 04:00:00 2024 GMT
        Subject: CN=937e4200-9864-4af2-b2cc-257b283d2dcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e4:d6:c6:04:60:02:85:94:e4:3f:74:52:d0:
                    5c:4e:f8:84:de:9e:1f:ed:f2:7d:aa:18:77:be:27:
                    18:85:92:6e:b9:33:ee:fc:e0:e4:fa:9b:95:7f:03:
                    ab:1a:c0:11:8f:60:81:75:c0:43:60:c0:2c:40:9e:
                    55:f8:9d:37:92:3f:df:cc:ca:11:5c:f3:13:cf:f3:
                    12:2f:54:27:7f:56:24:8a:3a:af:4b:35:13:24:7b:
                    c0:de:44:aa:6e:1d:d0:98:4a:2d:97:dc:41:54:16:
                    be:a3:a8:94:c0:08:e3:11:04:0b:fe:e9:8e:57:c5:
                    9b:c6:80:be:f6:d0:5e:15:2e:a7:77:73:89:ac:e7:
                    96:a0:7d:53:3f:40:3d:4c:24:cc:c5:52:97:dc:06:
                    59:36:b3:03:2d:65:7d:01:cd:cf:58:a2:df:7a:a0:
                    34:c4:0d:a0:76:b9:c8:0b:5a:a0:c9:dd:0f:ad:a6:
                    89:e7:60:13:69:67:d4:b2:c3:18:5b:8e:1e:f8:57:
                    0d:b3:bb:cd:e4:c9:ac:44:99:36:08:49:e1:04:d2:
                    b2:b2:1c:96:c0:f2:bc:a2:20:c3:18:fa:1b:f4:c0:
                    e9:6d:b2:fc:44:90:c6:65:ac:1e:56:fb:a2:5c:2b:
                    93:d1:4a:79:db:8f:04:de:2a:5e:b3:cd:27:20:2c:
                    00:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:62:01:B9:A4:C6:C1:81:5D:51:DF:17:41:27:40:65:37:06:6E:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/c8b3527e-2448-347d-a1c5-3253238efb84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.crl

            X509v3 Authority Key Identifier:
                keyid:BA:78:63:90:FF:86:D1:EF:75:8E:75:29:1C:FC:FC:99:73:C8:3C:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7a0d76fa-3114-4c31-b7dc-95977b39b4e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.67.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:06:7a:48:3d:09:c1:88:b8:31:5b:ea:d3:84:86:07:3e:08:
         93:7b:bd:39:56:d4:e9:8f:24:87:b3:fb:3e:d7:00:29:60:c2:
         96:10:cf:fa:a5:c8:53:88:1b:23:d7:71:39:8e:9c:06:11:9f:
         00:02:4d:dc:dc:4b:17:b9:38:c0:06:8f:19:a2:75:c3:4a:31:
         d0:56:8e:7f:0f:99:57:9a:b3:a8:14:3d:b3:49:71:da:31:a4:
         ee:11:2a:ac:1f:5f:72:49:4f:2c:d3:0b:05:cc:50:55:f9:32:
         c0:de:4d:c0:b2:df:b7:b7:76:bc:a8:aa:88:c5:f0:b7:8b:31:
         52:28:5f:a3:e8:28:09:df:b1:44:21:4f:05:5c:18:25:5f:dd:
         c7:93:db:e7:02:f0:89:e4:e9:73:80:8c:06:f7:32:50:ec:75:
         fc:92:bb:45:b9:da:22:f6:f5:c7:55:99:23:f8:ae:37:99:41:
         13:e2:3f:9d:af:18:66:9d:bf:57:c4:10:79:70:7d:03:04:0f:
         2c:41:6a:b5:f8:af:1f:6e:16:3f:33:b5:2a:67:87:80:48:f0:
         93:09:ae:d4:be:2b:55:ac:d5:90:dc:f2:ea:34:e0:8f:d5:1c:
         94:8b:b9:a8:be:3c:e8:a9:0e:7f:47:30:9a:a4:ce:db:a1:58:
         4d:b0:fe:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----